$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/9b455011-eb5b-3119-83c2-d51fcb7a604b.roa File: 9b455011-eb5b-3119-83c2-d51fcb7a604b.roa (raw, json) Hash identifier: D8BTF9sjrUAGb2jaOkeaSaZw8aQknkaDo53fCsAzm4w= Subject key identifier: 96:E0:EF:D5:0D:54:F1:9A:53:7B:45:59:67:57:4C:C8:82:C1:43:92 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584F3A17DB17A91B69D1B27385C0 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/9b455011-eb5b-3119-83c2-d51fcb7a604b.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 55286 IP address blocks: 152.232.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:db:17:a9:1b:69:d1:b2:73:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=d3946c02-694b-42cf-83c6-a4bce7edcbcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8a:0c:d2:2c:ae:32:bd:91:0a:dd:f8:4a:89: 64:34:d6:70:39:8b:32:91:58:b4:89:5e:bd:54:bb: 27:f6:6d:2e:95:a5:9b:09:50:27:3e:20:97:60:4f: 7a:ed:1d:13:98:10:2d:97:ae:28:27:5b:cb:0a:0b: 79:6b:46:fb:eb:57:54:da:47:5c:36:ab:2c:81:de: 67:d9:87:16:6b:be:9a:2f:26:8f:7d:ef:42:0e:0a: c3:b4:5b:bd:d9:67:37:7e:6a:6d:e3:a6:4f:42:d3: 92:25:b3:f1:1f:f6:cc:da:a5:20:3d:65:03:d6:33: b3:be:a3:f9:9d:c1:d3:c1:ea:2b:d9:50:90:d0:0f: 04:1c:38:75:28:18:56:60:16:0b:f3:72:91:d5:89: bd:a5:33:2a:18:eb:eb:55:68:6f:08:ad:c5:cf:48: c7:8f:be:d3:b1:5a:28:b8:00:d2:4a:ba:53:77:8c: 15:a3:cf:c0:06:74:de:80:1f:53:0b:b0:81:4f:79: d3:28:95:b2:05:21:32:3d:52:17:4c:0d:d6:88:3e: 98:fd:04:65:56:25:e9:36:e6:bc:ab:d5:83:dc:1a: 43:15:35:f3:fa:fd:b0:da:6a:5d:5c:36:fd:97:3c: 19:41:e4:24:4b:1e:85:ae:f9:46:8a:9b:d2:9d:18: cd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E0:EF:D5:0D:54:F1:9A:53:7B:45:59:67:57:4C:C8:82:C1:43:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/9b455011-eb5b-3119-83c2-d51fcb7a604b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:82:4e:66:38:90:a6:06:30:1c:8d:52:05:1b:59:9b:04:b2: ca:a4:48:96:60:0a:96:e2:81:38:66:6c:d2:1a:16:1b:ea:23: 4f:92:ab:fd:81:c0:31:c3:0c:a3:5d:f9:f1:99:ee:95:44:43: bb:9c:29:5b:4b:37:73:b8:fd:18:91:9f:0c:df:64:ad:fe:1e: d1:33:ef:85:09:fe:58:f6:b3:20:66:e5:4a:ec:89:79:55:2c: af:4a:2b:69:f3:0d:dc:c0:c8:26:49:25:b9:09:34:af:de:96: 63:82:97:64:8a:ee:26:c2:60:f3:1a:07:77:ce:61:88:a6:d1: 1d:27:28:00:e9:f0:5f:e7:7a:86:91:ed:b5:93:1e:0c:e0:73: 83:af:d1:36:d2:09:59:8d:9e:03:d1:f7:e4:22:6f:27:0f:13: ff:85:1b:76:91:d7:f7:84:65:dd:97:47:1e:96:0b:26:54:72: 1d:fb:51:37:76:8f:45:75:6c:4a:02:76:da:75:08:e7:e1:25: 3f:9e:30:65:51:56:4c:fc:23:26:3e:c0:ca:57:08:32:52:5d: 25:80:4b:f7:61:d3:9a:db:65:5e:b8:7b:aa:80:4c:2c:c5:3d: 0e:2e:45:97:dc:02:c9:b3:ef:8e:19:fa:ea:a2:3d:bc:8f:70: 10:2b:66:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9sXqRtp0bJzhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk ZDM5NDZjMDItNjk0Yi00MmNmLTgzYzYtYTRiY2U3ZWRjYmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYoM0iyuMr2RCt34SolkNNZwOYsykVi0iV69 VLsn9m0ulaWbCVAnPiCXYE967R0TmBAtl64oJ1vLCgt5a0b761dU2kdcNqssgd5n 2YcWa76aLyaPfe9CDgrDtFu92Wc3fmpt46ZPQtOSJbPxH/bM2qUgPWUD1jOzvqP5 ncHTweor2VCQ0A8EHDh1KBhWYBYL83KR1Ym9pTMqGOvrVWhvCK3Fz0jHj77TsVoo uADSSrpTd4wVo8/ABnTegB9TC7CBT3nTKJWyBSEyPVIXTA3WiD6Y/QRlViXpNua8 q9WD3BpDFTXz+v2w2mpdXDb9lzwZQeQkSx6FrvlGipvSnRjNmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbg79UNVPGaU3tFWWdXTMiCwUOSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvOWI0NTUwMTEtZWI1Yi0z MTE5LTgzYzItZDUxZmNiN2E2MDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmOiTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGCTmY4kKYGMByNUgUbWZsEssqkSJZgCpbigThmbNIaFhvqI0+Sq/2B wDHDDKNd+fGZ7pVEQ7ucKVtLN3O4/RiRnwzfZK3+HtEz74UJ/lj2syBm5UrsiXlV LK9KK2nzDdzAyCZJJbkJNK/elmOCl2SK7ibCYPMaB3fOYYim0R0nKADp8F/neoaR 7bWTHgzgc4Ov0TbSCVmNngPR9+QibycPE/+FG3aR1/eEZd2XRx6WCyZUch37UTd2 j0V1bEoCdtp1COfhJT+eMGVRVkz8IyY+wMpXCDJSXSWAS/dh05rbZV64e6qATCzF PQ4uRZfcAsmz744Z+uqiPbyPcBArZro= -----END CERTIFICATE-----Generated at Tue Sep 22 11:23:04 2026 by rpki-client